Privacy Policy

Last updated: April 7, 2026

OneBook ("we," "us," or "our") operates the OneBook platform at onebook-app.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using OneBook, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information (Studio Owners & Artists)

When you create an account, we collect:

Email address
Password (stored securely using industry-standard authentication)
Display name
Organization (studio) name

If you sign in with Google, we receive your name and email address from Google. We do not receive or store your Google password.

1.2 Client Information (Collected by Studios)

When a tattoo client submits a request through a studio's public intake form, the following information is collected on behalf of that studio:

First name and last name
Email address
Phone number (optional)
Date of birth
Gender
Tattoo description, placement, size, style, and color preferences
Budget notes
Reference and placement images
Whether it is their first tattoo
Confirmation that they are 18 years of age or older

1.3 Consent Form Data

When a client completes a digital consent form before an appointment, we collect:

Full legal name
Date of birth
Phone number
Government-issued ID number (optional, depending on studio template)
Photo of government-issued ID
Digital signature
Date and time of consent

This data is collected and stored on behalf of the studio that requested the consent form. Studios are responsible for determining what consent data they require from their clients.

1.4 Payment Information

Payments are processed entirely through Stripe. We do not store credit card numbers, bank account numbers, or other sensitive payment credentials on our servers. We store:

Stripe customer and transaction identifiers
Payment amounts, currency, and status
Subscription plan and billing period information

1.5 Messages

OneBook provides built-in messaging between studios and clients. Message content, sender information, and timestamps are stored to facilitate communication.

1.6 Uploaded Files

Images uploaded through tattoo request forms, consent forms, and service records are stored in secure cloud storage. Images may be resized client-side before upload to reduce file size.

1.7 Automatically Collected Information

When you use the Service, our servers may automatically log standard technical information such as your IP address, browser type, and request timestamps. We do not use third-party analytics, advertising trackers, or cookies for tracking purposes.

We use browser local storage solely for maintaining your authentication session.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service
Authenticate your identity and manage your account
Process payments and manage subscriptions
Facilitate communication between studios and their clients
Send transactional notifications (e.g., appointment reminders, consent form requests, payment receipts)
Provide customer support
Comply with legal obligations

We do not sell your personal information. We do not use your data for advertising or marketing to third parties.

3. How We Share Your Information

We share information only in the following circumstances:

With your studio: Client data submitted through request forms, consent forms, and messages is shared with the studio you are interacting with. Studios are independent data controllers for their client data.
Service providers: We use third-party services to operate the platform, including Stripe for payment processing. These providers process data on our behalf and are bound by their own privacy policies.
Legal requirements: We may disclose information if required to do so by law, regulation, legal process, or governmental request.

4. Data Retention and Deletion

We retain information needed to provide the Service, maintain transaction records, handle refunds and disputes, and meet applicable obligations. Closing an account or withdrawing a booking-fee authorization does not automatically erase every associated record.

Original booking-fee agreements and limited payment evidence are currently preserved. Automatic deletion under a fixed retention schedule is not yet enabled. Retention reviews and deletion previews do not themselves delete records or authorize new charges.

A withdrawal prevents future saved-card collection under that agreement. It does not cancel an already submitted payment, refund money, or remove a payment method used for another valid purpose. Stripe holds payment-method details under its own terms and privacy notices; we do not store full card numbers or security codes.

For access, correction, or deletion requests, contact your studio or support@onebook-app.com. We review what can be removed and what limited information still has a justified purpose. Financial records may prevent immediate studio deletion, and retained agreement evidence can remain after studio closure. This does not permit unrelated use or new booking-fee charges.

5. Data Security

We take reasonable technical and organizational measures to protect your data, including:

Encryption in transit (TLS/HTTPS) for all data transmissions
Encryption at rest for stored data
Secure authentication with support for OAuth 2.0 (PKCE flow)
PCI-compliant payment processing through Stripe (we never handle raw card data)
Role-based access controls within the application

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict certain processing of your data
Request a portable copy of your data

To exercise any of these rights, please contact us at support@onebook-app.com. We will respond within 30 days.

For tattoo clients: Your data is managed by the studio you interacted with. Please contact the studio directly for data access or deletion requests related to your tattoo requests, consent forms, or messages. If you are unable to reach the studio, contact us and we will assist.

7. Children's Privacy

OneBook is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. Tattoo request forms require confirmation that the submitter is 18 years of age or older.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email:support@onebook-app.com